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ORIGINALITY GUARANTEE SYSTEM, EMBEDDED 
INFORMATION/ALTERATION DETECTION APPARATUS AND EMBEDDED 
INFORMATION/ALTERATION DETECTION METHOD, AND RECORD MEDIUM 
STORING EMBEDDED INFORMATION/ALTERATION DETECTION PROGRAM 

THEREIN 

BACKGROUND OF THE INVENTION 

1. Field of Invention 

[0001] The present invention relates to an embedded information/alteration 
detection apparatus as well as an embedded information/alteration detection method, and a 
computer-readable record medium storing an embedded information/alteration detection 
program therein, which embeds information by chiefly utilizing redundancy existent 
concerning the description method of a data structure, in order to detect the alteration or the 
legitimacy of the data. More particularly, the invention relates to data hiding technology 
which embeds information into data describing a three-dimensional shape, such as three- 
dimensional design data generated in such, as three-dimensional graphics and CAD. The 
invention also relates to a technology which detects the alteration or legitimacy of the data of 
a three-dimensional shape composed as the combination of primitive geometric shapes, such 
as a polyhedron and a body of revolution. 

2. Description of Related Art . . 
[0002] Heretofore, digital watermark technology and data hiding technology as 

described below have been known in the related art. 

[0003] JP-A-1 0-334272 for example, contains a technique wherein information is 
embedded by changing the geometry parameters of a three-dimensional shape model. 

[0004] Specifically, the related-art technique adopts a method wherein various 
information items are embedded into the three-dimensional shape model in a visible or 
invisible state by changing the geometry parameters of the three-dimensional shape model, 
namely, a description to define a geometric shape. 

[0005] The three-dimensional shape model being a subject for embedding is usually 
composed of its primitives (constituents) that are polyhedrons, straight lines, sets of points, or 
curved surfaces. Each of the primitives is defined by geometry parameters. Accordingly, the 
three-dimensional shape model has its whole geometric shape defined by the set of a large 
number of geometry parameters. 
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[0006] As stated in the related-art technique, therefore, the information is embedded 
by changing the geometry parameters of a plurality of primitives which constitute the three- 
dimensional shape model. 

[0007] It is also described in the related-art technique that the information is 
embedded by dividing the geometry parameters into numerical parameters and phases and 
then changing the respective divisions, and that the embedded information is conversely 
extracted by detecting the changed geometry parameters. 

[0008] Further, JP-A-2000-82156 contains a technique wherein the data of a three- 
dimensional shape model is submitted to a wavelet transform, and information is embedded 
into the result of the transform. 

[0009] Specifically, according to this related-art example, three-dimensional shape 
transformation means performs wavelets transformation on the data of an original model V° 
and digital watermark embedding means embeds watermark data into a WT factor vector 
generated by the wavelet transformation. Inverse transformation means of a three- 
dimensional shape creates the data of a three-dimensional shape model (distribution model 
V t0 ) in which the watermark data is embedded, on the basis of the WT factor vector. 

[0010] Thus, according to the related-art technique, in a case where the data of 
digital information, including copyright information,etc, is embedded into three-dimensional 
shape data, the error control can be performed in consideration of the visual change of the 
three-dimensional shape model in which the digital information data is embedded. A robust 
digital information data embedding method is described even when the shape model is 
deleted or deformed. 

SUMMARY OF THE INVENTION 

[001 1] As design requirements for digital watermark technology or data hiding 
technology, the following is mentioned: 

[0012] • Watermark information does not degenerate or disappear due to any of 
various processes, such as editing, compression and transmission. 

[0013] • The deterioration of contents attendant upon the embedding watermark 
information is minimum. 

[0014] • Watermark information is dispersed over the whole region of the contents 
without being arranged only on a header portion or a specified region. 

[0015] • The technology is immune against any malicious attack, such as the 
alteration or elimination of an digital watermark. 
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[0016] • Embedding/detecting watermark information is easy, and the embedded 
watermark time required is short. 

[0017] Regarding the requirements, the related-art technique described in the JP-A- 
10-334272 is problematic in that the original geometric data must be changed in order to 
embed the information and that an algorithm to detect the watermark information becomes 
complicated. 

[0018] The related-art technique described in the JP-A-2000-82 156 features that the 
wavelet transform is performed as a concrete operatingmethod. But it is problematic in that 
the resulting data that is embedded with the information differs from the original data. 

[0019] The present invention has been made considering such circumstances, and 
provides an embedded information/alteration detection apparatus as well as an embedded 
information/alteration detection method, and a computer-readable record medium storing an 
embedded information/alteration detection program therein, which can embed and read out 
information without any change in the "significance" and "quality" of represented data. 

[0020] The present invention has been made to accomplish the above. An aspect of 
the present invention includes an originality guarantee system having an embedded 
information apparatus which embeds information into a plurality of structural data and an 
information alteration detection apparatus which detects any alteration of the plurality of 
structural data with the information embedded therein by the embedded information 
apparatus. The embedded information apparatus includes a data standardization device that 
sorts the plurality of structural data on the basis of a first rule, a message digest generation 
device that calculates a message digest with a predetermined hash function, for a bit stream 
composed of the plurality of structural data sorted by said data standardization means; a data 
transformation device that sorts the plurality of structural data sorted by said data 
standardization device, on the basis of a second rule that is different from the first rule, with a 
key being the message digest calculated by said message digest generation device. 

[0021] The information alteration detection apparatus includes a data 
standardization device that sorts a plurality of structural data on the basis of the firstrule, a 
message digest generation device to calculate a message digest with the hash function, for a 
bit stream composed of the plurality of structural data sorted by said data standardization 
device, a data transformation device that sorts the plurality of structural data sorted by said 
data standardization device, on the basis of the second rule, with a key being the message 
digest calculated by said message digest generation device, and a decision device that 
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compares the plurality of structural data, which is sorted by said data transformation device, 
with the plurality of structural data before being sorted by said data standardization device. 
The decision device decides that the plurality of structural data, before being sorted by said 
data standardization device, have not been altered, when both of the structural data match. 
The decision device also decides that the plurality of structural data before being sorted by 
said data standardization device, have been altered, when both of the structural data do not 
match. 

[0022] An aspect of the present invention includes a data standardization device that 
sorts a plurality of structural data on the basis of a predetermined rule, a message digest 
generation device that calculates a message digest with a predetermined hash function, for a 
bit stream composed of the plurality of structural data sorted by said data standardization 
device, and a data transformation device that sorts the plurality of structural data sorted by 
said data standardization device, on the basis of a rule that is different from the first- 
mentioned rule, with a key being the message digest calculated by said message digest 
generation device. 

[0023] An aspect of the present invention also includes a data standardization 
device that sorts a plurality of structural data on the basis of a first rule that is the same as that 
of a data standardization device of an embedded information apparatus, a message digest 
generation device that calculates a message digest with a predetermined hash function, for a 
bit stream composed of the plurality of structural data sorted by said data standardization 
device, a data transformation device that sorts the plurality of structural data sorted by said 
data standardization device, on the basis of a rule being that is different from the first rule and 
being the same as that of data transformation device of the embedded information apparatus, 
with a key being the message digest calculated by said message digest generation device, and 
decision device that compares the plurality of structural data, which is sorted by said data 
transformation device, with the plurality of structural data before being sorted by said data 
standardization device, and that decides that the plurality of structural data, before being 
sorted by said data standardization device, have not been altered, when both of the structural 
data match, and that decides that the plurality of structural data, before being sorted by said 
data standardization device, have been altered, when both of the structural data do not match. 

[0024] In an aspect of the present invention, a plurality of structural data is sorted 
on the basis of a first rule. A message digest with a predetermined hash function, for a bit 
stream composed of the plurality of sorted structural data is calculated. The plurality of 
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sorted structural data is sorted on the basis of a second rule, that is different from the first 
rule, by using the calculated message digest as a key. 

[0025] In an aspect of the present invention, a plurality of structural data is sorted 
on the basis of a first rule in an embedded information method. A message digest with a 
predetermined hash function, for a bit stream composed of the plurality of sorted structural 
data is calculated. The plurality of sorted structural data is sorted on the basis of a second 
rule in the embedded information method by using the calculated message digest as a key. 
The plurality of structural data, sorted on the basis of the second rule, is compared with the 
plurality of structural data, before being sorted on the basis of the first rule. It is determined 
that the plurality of structural data, before being sorted on the basis of the first rule, has not 
been altered, when both of the structural data match. It is also determined that the plurality of 
structural data, before being sorted on the basis of the first rule, has been altered, when both 
of the structural data do not match. 

[0026] In addition, an aspect of the present invention includes a computer-readable 
record medium that stores and executes an embedded information program on a computer and * 
steps as follows. A plurality of structural data on the basis of a first rule is stored. A message 
digest with a predetermined hash function, for a bit stream composed of the plurality of sorted 
structural data is calculated. The plurality of sorted structural data is sorted on the basis of a 
second rule, that is different from the first rule, by using the calculated message digest as a 
key. 

[0027] An aspect of the present invention also has a computer-readable record 
medium that stores and executes an information alteration detection program on a computer 
as follows. A plurality of structural data is sorted on the basis of a first rule in the sorting 
process in which the computer executes an embedded information program. A message 
digest, with a predetermined hash function, is calculated, for a bit stream composed of the 
plurality of sorted structural data. The plurality of sorted structural data is sorted on the basis 
of a second rule in the embedded information method by using the calculated message digest 
as a key. The plurality of structural data, which is sorted on the basis of the second rule, is 
compared with the plurality of structural data, before being sorted on the basis of the first 
rule. It is determined that the plurality of structural data, before being sorted on the basis of 
the first rule, have not been altered, when both of the structural data match. It is also 
determined that the plurality of structural data, before being sorted on the basis of the first 
rule, have been altered, when both of the data do not match. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0028] Fig. 1 is a block schematic showing the construction of an embedded 
information apparatus in an exemplary embodiment; 

[0029] Fig. 2 is a schematic showing an example of the VRML format of a 
sexangular polygon which is described by an xyz-coordinate system; 

[0030] Figs. 3A-3D are schematics showing an example of the Raw Triangle format 
of triangles which are described by an xyz-coordinate system; 

[0031] Fig. 4 is a block schematic showing the construction of an information 
alteration detection apparatus in this an embodiment; 

[0032] Fig. 5 is a flow chart showing the course of an embedded information 
process based on an originality guarantee system in an exemplary embodiment; and 

[0033] Fig. 6 is a flow chart showing the course of an information alteration 
detection process. 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 

[0034] A first exemplary embodiment of a guarantee system of data originality to 
which an embedded information/alteration detection apparatus of an aspect of the present 
invention is applied will be described with reference to the drawings. The guarantee system 
of data originality in this exemplary embodiment includes an embedded information 
apparatus which embeds information into a plurality of structural data (to be described later), 
and an information alteration detection apparatus which detects any alteration of the plurality 
of structural data into which the embedded information apparatus has embedded the 
information. 

[0035] Fig. 1 is a block schematic showing the construction of the embedded 
information apparatus in this exemplary embodiment. 

[0036] The embedded information apparatus in this exemplary embodiment is so 
constructed that a control unit 1, an input unit 2, an output unit 3, a storage unit 4, a data 
standardization process unit 5, an additional information granting process unit 6, a message 
digest process unit 7, and a data transformation process unit 8 are interconnected by a bus 1 0. 

[0037] The control unit 1 controls data input/output in the input unit 2, the output 
unit 3, the storage unit 4, the data standardization process unit 5, the additional information 
granting process unit 6, the message digest process unit 7 and the data transformation process 
unit 8. 
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[0038] The input unit 2 is an interface unit that accepts the input of an object, which 
is a subject to embed watermark information and is composed of a plurality of structural data. 

[0039] Here, the "structural data" are data which have a data structure described by 
one or more parameters, and which can be sequenced by the parameter values. Concretely, 
the "structural data" are, for example, voice data in a format in which data are held in a 
plurality of divided blocks, two-dimensional image data in a format in which the description 
data of a pattern shape or the like are held in a plurality of divided blocks, or dynamic image 
data in a format in which three-dimensional image data, voice data and image data are held in 
a plurality of divided blocks. The data structure is such that, even when the sequence of the 
data is rearranged, a significance of the data is not changed. 

[0040] Geometric shape data, which are generated in three-dimensional graphics, 
CAD, or the like, will be taken as an example of three-dimensional image data, and explained 
below. Formats description of a three-dimensional shape are, for example, the following: 

[0041] • Three-dimensional description scheme that is employed in, such as VRML 
(Virtual Reality Modeling Language) Web. 

[0042] • X3D (Extensible 3D): a description format in which the VRML is 
integrated with XML 

[0043] • DXF/DWG which is the de facto standard format for CAD 

[0044] • HPGL: graphics format developed by Hewlett-Packard, or Hewlett- 
Packard Graphics Language 

[0045] • Raw Triangle: triangle coordinates written in ASCII text 

[0046] Figs. 2 and 3 show examples of formats which describe objects of three- 
dimensional shapes as structural data, respectively. Fig. 2 exemplifies the VRML format of a 
polyhedron that has 6 vertexes which is described by an xyz-coordinate system. From the 
viewpoint of an aspect of the present invention, the VRML format represents text data which 
have a data structure described by the single parameter of xyz-coordinate values. The VRML 
can be sequenced by the parameter value (details described later). 

[0047] Fig. 3 exemplifies triangle Raw Triangle format that is similarly described in 
an xyz-coordinate system. In the Raw Triangle format, three points are described in xyz- 
coordinates and also represent one triangle. 

[0048] In this manner, the "object description format" includes geometry parameters 
that determine the type, size, position and direction of an object. 
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[0049] The output unit 3 is an interface unit that outputs an object, which is 
embedded with watermark information and composed of a plurality of structural data. 

[0050] The storage unit 4 stores therein the following header additional information: 

[0051] • Information which represents a creator or a rightful person (name, some 
sort of ED or mail address, a URL, or the like) 

[0052] • Information on software or a device which handled the data (serial No., the 
version information of the software, or the like) 

[0053] • Information of a creation date, a data size, etc. 

[0054] The data standardization process unit 5 sorts a plurality of structural data on 
the basis of a predetermined rule (hereinbelow, termed the "first rule"). 

[0055] Here, several techniques are considered as the rule which the data 
standardization process unit 5 employs, that is, a sorting algorithm, and the installing aspects 
thereof. Basically, however, the order of the _structural data is changed in accordance with 
some sort of criterion. 

[0056] Subjects to apply the sorting algorithm, that is, subjects to rearrange data are 
the following two: 

[0057] A. To standardize the description content of the object itself 

[0058] B. To standardize the stated sequence of objects within a file (stream) 

[0059] Methods to be explained below are considered as practicable examples of 
installation concerning each of the subjects. 

[0060] A. Standardization of description content of structural data constituting 

object 

[0061] 1). Regarding structural data in a format in which an object is represented as 
the sequential set of points as in, for example, a polygon, the significance of the object is 
never changed even when the sequence of the points is changed as to the point from which 
description is started. Accordingly, a degree of freedom exists in the sequence. Specifically, 
it is considered as the first rule by way of example to set the description starting point at the 
point which is nearest to or furthest from any predetermined reference point. 

[0062] 2). A data structure, such as cylinder or body of revolution has an axis, 
which is described by data representative of a segment. A degree of freedom similarly exists 
in the description content, and it is considered to describe this description content by an origin 
and a directional vector, or by the two points of an initial end and a terminal end. 

[0063] B. Objects order 
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[0064] 1). Objects are rearranged in the order in which they are nearer to or further 
from any predetermined reference point. On this occasion, the rearrangement processing is 
applied only to the specified coordinates of the objects. Alternatively, the rearrangement 
processing may well be applied to the objects subjected to coordinate transformation into a 
predetermined coordinate system. The coordinate system need not always to be a rectangular 
coordinate system. 

[0065] That typical point (typical parameter value) of each object at which the 
distance thereof to the reference point is measured can be selected from the following 
examples: 

[0066] • Point which first appears first in the object description 
[0067] • Centroid of the object 

[0068] • Point which is nearest to (or furthest from) the reference point within the 

object 

[0069] 2). Objects are rearranged in a sequence which conforms to the properties of 
the objects. 

[0070] By way of example, objects are sorted by areas and by volumes, respectively, 
when they are polygon objects and objects that have volumes. 

[0071] When objects have textures, any sequence is defined for data representing 
the textures and the objects, are sorted in accordance with the sequence. Regarding the 
expression "any sequence" here, the texture representing data are interpreted as, for example, 
numerical values so as to introduce the sequence based on the magnitudes of the numerical 
values, or they are interpreted as, for example, character strings so as to introduce the 
sequence based on the lexicographic order. 

[0072] 3). Objects are rearranged in a sequence which conforms to the correlations 
of the positions of the objects. 

[0073] One object is designated, and a tree-like data structure is constructed in 
accordance with the distances of objects from the designated object. Thereafter, the objects 
are sequenced by the way of tracing the tree on the basis of any rule. 

[0074] It is also considered to combine the above methods. 

[0075] The standardization process in the standardization process unit 5 will now be 
explained using examples of the Raw Triangle. 

[0076] First, a specified reference point A is defined in a three-dimensional space 
(Step 0). 
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[0077] Subsequently, all triangles are transformed into a format in which each of 
them is described from a point nearest to the reference point A (Step 1). Specifically, in the 
course of the step 1, one of the triangles is selected and distances from three points of 
description of the selected triangle to the reference point A are respectively computed. The 
description of the triangle is changed so that the point of the shortest distance may become the 
first, on the basis of the magnitudes of the distances of the respective points to the reference 
point A. 

[0078] Subsequently, a specified reference point B is defined in the three- 
dimensional space (Step 2). The distances of all the triangles to the reference point B are 
respectively computed in the same manner as at the step 1 (Step 3). It is established as a rule 
that the distance is calculated for the first point of the description of each triangle. The 
triangles are rearranged in the order of shorter distances to the reference point B, on the basis 
of the calculated results of the distances to the reference point B (Step 4). 

[0079] The standardization process based on the first rule will be explained in a 
simple practicable example. 

[0080] Consider a triangle Tl (0,0,0, 1,0,0, 0,1,0) and a triangle T2 (0,1,0 1,1,0, 
1,2,0). In representation conforming to the Raw Triangle format, the triangles are described 
as follows: 



000100010 
010110120 

■•• (Representation 1) 

[0081] Assuming by way of example that the reference point A is (10,0,0), the 
description of the triangles is brought into the following sequential turns by the step 1 
(Standardization A): 

Tl (1,0,0,0,1,0,0,0,0) 

T2 (1,1,0,1,2,0,0,1,0) 

[0082] Subsequently, assuming that the reference point B is (0,10,0), the triangle T2 
is nearer to the point B, and hence, the sequential turn of the triangle T2 comes first at the 
step 2. After all, the Raw Triangle representation is changed from the above representation 1 
to Representation 2 in which the sequential turns of the triangles Tl and T2 are rearranged as 
follows (Standardization B): 
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110120010 
100010000 

••• (Representation 2) 

[0083] The "standardization" is thus completed. Herein, if the reference points A 
and B are unknown, the triangles cannot be properly rearranged even when the sorting 
algorithm is known. 

[0084] A multiplicity of variations are considered in such a manner that, regarding 
the computing method for the distances, the coordinate system of the triangles is transformed 
into, for example, a polar or a cylindrical coordinate system, whereupon distance weighting 
calculation is performed. 

[0085] The additional information granting process unit 6 adds the following 
additional information stored in the storage unit 4, to the output result of the standardization 
process unit 5: 

[0086] • Information which indicates a creator or a rightful person (name, any ED or 
mail address, a URL, or the like) 

[0087] • Information on software or a device which handled the data (serial No., the 
version information of the software, or the like) 

[0088] • Information of a creation date, a data size, etc. 

[0089] Common keys are given to the contents of the additional information on both 
the embedding side and the receiving side. 

[0090] The message digest process unit 7 calculates a message digest by employing 
a predetermined hash function, for a bit stream which includes a plurality of structural data 
sorted by the data standardization process unit 5, and for a bit stream in which the additional 
information granting process unit 6 has further added additional information to the structural 
data, or only for the former bit stream. 

[0091] Considered as a practicable message digest process is, for example, the MD5 
standard in which, when any bit string of at least one bit is input, a bit string of fixed length (a 
bit pattern of 160 bits) is output. 

[0092] With a key being the message digest calculated by the message digest 
generation device, the data transformation process unit 8 sorts a plurality of structural data 
sorted by the data standardization device, in conformity with a second rule that is different 
from the first rule. 



12 

[0093] There will be explained an example of the second rule which determines a 
description sequence with a starting point set at the standardized representation 2 in the 
foregoing example. 



110120010 
100010000 

■•• (Representation 2) 

[0094] It is first assumed that a message digest value of the following bit string (in 
the binary notation), for example, have been obtained when a message digest process is 
executed for a bit stream, which includes a plurality of standardized structural data, and a bit 
stream in which the additional information granting process unit 6 has further added 
additional information to the structural data: 

1110100110100011110000110101000111 - 

[0095] Using the bit string, the description of the representation 2 is transformed. 
[0096] A. Transformation of Description sequence of Vertexes of Individual 
triangles 

[0097] First, every 2 bits of the above bit string are acquired from the beginning 
thereof. In this case, four kinds of combinations are considered because of the 2 bits. 

[0098] When Tla, Tib and Tic denote the 3 standardized vertexes of the first 
triangle Tl, the vertexes shall be rearranged in accordance with the obtained bits, as follows: 
00: Tla,Tlb,Tlc 
01: Tlb,Tlc,Tla 
10: Tlc,Tla,Tlb 
11: Tla,Tlb,Tlc 

[0099] The 2 bits at the head of the message digest value are "11", and this 
rearrangement is held intact. The next 2 bits are "10", and the description sequence of 
vertexes is changed into the order of (c,a,b) for the second triangle. 

[0100] B. Rearrangement of Triangles themselves 

[0101] Subsequently, the sequential turns of objects (in the explanation here, the 
two triangles) are determined. Incidentally, seven objects A, B, C, D, E, F and G will be 
considered as a more appropriate example in the ensuing description. However, the 
description is quite similarly applicable to the case of the two triangles, and the present 
invention shall not be restricted by the mere example. 
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[0102] Specifically, the continuation of the bit stream resulting from the message 
digest process is now "1001 10", and it will be considered to successively use the bits of the 
continuation from the leftmost one. 

[0103] Outset: [A]BCDEFG 

[0104] Since the head object A has a head bit of "1", it is replaced with the adjacent 
object B. The object which is a subject for a replacement operation is enclosed in []. 
[0105] [1]:B[A]CDEFG 

[0106] The next bit is "0", and the object being the subject for the operation is set at 
the adjacent object C without replacing the object A with the adjacent object this time. 
[0107] [2]: BA[C]DEFG 

[0108] Since the next bit is also "0", the further adjacent object D is set as the 
subject for the operation. 

[0109] [3]:BAC[D]EFG 

[0110] Since the next bit is "1", the object D is replaced with the adjacent object E. 
[0111] [4]: BACE[D]FG 

[0112] Further, since the next bit is "1", the object D is replaced with the adjacent 
object F, also. 

[0113] [5]: BACEF[D]G 

[0114] Since the last bit is "0", the rearrangement is ended. 
[0115] [6]: BACEFDG 

[0116] The rearrangement process which is executed on the basis of the message 
digest value by the data transformation process unit 8 is thus completed and the structural 
data submitted to the rearrangement process is delivered to the output unit 3. 

[0117] In this way, the description sequence of objects can be uniquely determined 
in accordance with a bit string outputted by a message digest function. 

[0118] Fig. 4 is a block schematic showing the construction of the information 
alteration detection apparatus in this exemplary embodiment. 

[0119] The information alteration detection apparatus in this exemplary 
embodiment is so constructed that a control unit 1 1, an input unit 12, an output unit 13, a 
storage unit 14, a data standardization process unit 15, an additional information granting 
process unit 16, a message digest process unit 17, a data transformation process unit 18, and 
an alteration decision process unit 19 are interconnected by a bus 20. 
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[0120] The control unit 1 1 controls data input/output in the input unit 12, the output 
unit 13, the storage unit 14, the data standardization process unit 15, the additional 
information granting process unit 16, the message digest process unit 17, the data 
transformation process unit 18 and the alteration decision process unit 19. 

[0121] The input unit 12 is an interface unit which inputs an object composed of a 
plurality of structural data with watermark information embedded therein by the embedded 
information apparatus. 

[0122] The output unit 13 is an interface unit that outputs the result of a decision on 
the presence or absence of any alteration (described later) as rendered by the alteration 
decision process unit 19. 

[0123] The storage unit 14 stores therein the same additional information as in the 
storage unit 4 of the embedded information apparatus, by employing common keys. 

[0124] The data standardization process unit 15, as well as to the data 
standardization process unit 5, sorts a plurality of structural data inputted to the input unit 12, 
on the basis of the first rule stated above. 

[0125] The additional information granting process unit 16, as well as the additional 
information granting process unit 6 of the embedded information apparatus, adds the 
additional information stored in the storage unit 14, to the output result of the standardization 
process unit 15. 

[0126] The message digest process unit 17 calculates a message digest by 
employing a predetermined hash function, for a bit stream which includes a plurality of 
structural data sorted by the data standardization unit 15. 

[0127] With a key being the message digest calculated by the message digest 
generation process unit 17, the data transformation process unit 18, as well as the data 
transformation process unit 8, sorts a plurality of structural data which has been sorted by the 
data standardization process unit 15, and the plurality of structural data on which additional 
information has been further granted by the additional information granting process unit 16, 
in conformity with the second rule stated above. 

[0128] The alteration decision process unit 19 compares a plurality of structural 
data, which is transformed, by the data transformation process unit 18, with a plurality of 
structural data, before being sorted by the data standardization process unit 15. If the two 
kinds of structural data agree, the alteration decision process unit 19 renders the decision that 
the plurality of structural data before being sorted by the data standardization process unit 15, 
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namely, the plurality of inputted structural data, have not been altered. In contrast, if the two 
kinds of structural data do not agree, the unit 19 renders the decision that the plurality of 
structural data before being sorted by the data standardization device have been altered. 

[0129] Regarding a case where the plurality of structural data that is transformed by 
the data transformation process unit 1 8 bear the additional data bestowed before the data 
transformation, if the two kinds of structural data agree, the alteration decision process 
unit 19 renders the decision that the additional data have not been altered, either. However, 
if the two kinds of structural data do not agree, the unit 19 renders the decision that the 
plurality of structural data before being sorted by the data standardization device or/and the 
additional data have been altered. 

[0130] Next, the operation of a data providing system in this exemplary 
embodiment will be described with reference to the drawings. Fig. 5 is a flow chart showing 
the course of an embedded information process which is based on an originality guarantee 
system in this exemplary embodiment. Besides, Fig. 6 is a flow chart showing the course of 
an information alteration detection process which follows the embedded information process. 

[0131] As the embedded information process, in the embedded information 
apparatus, the data of a three-dimensional shape model, which is a set of objects composed of 
a plurality of structural data are first prepared (Step 5-1). When the data of the three- 
dimensional shape model are inputted to the input unit 2, the data standardization process 
unit 5 sorts the data in conformity with the predetermined first rule so as to transform them 
into a standard data representation format (Step 5-2). 

[0132] Subsequently, the additional information granting process unit 6 bestows 
header information and additional information, such as common keys, on the data of the 
three-dimensional shape model transformed into the standard data representation format (Step 
5-3). 

[0133] Subsequently, the message digest process unit 7 executes a message digest 
process for all or some of the additional information and the data of the three-dimensional 
shape model that is standardized, thereby obtaining a message digest value (Step 5-4). 

[0134] The data transformation process unit 8 transforms the representation of the 
standard data format on the basis of the second rule in accordance with the bit stream of the 
message digest value (Step 5-5). 

[0135] The embedded information process is thus completed. 
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[0136] Next, as the information alteration detection process, in the information 
alteration detection apparatus, the data of a three-dimensional shape model, in which 
information is thought to be embedded, are prepared (Step 6-1). When the data of the three- 
dimensional shape model are input to the input unit 12, the data standardization process 
unit 15, as well as the data standardization process unit 5, sorts the data in conformity with 
the predetermined first rule so as to transform them into a standard data representation format 
(Step 6-2). 

[0137] Subsequently, the additional information granting process unit 16, as well as 
the additional information granting process unit 6, bestows header information and additional 
information, such as header information and common keys, on the data of the three- 
dimensional shape model transformed into the standard data representation format (Step 6-3). 

[0138] Subsequently, the message digest process unit 17, as well as the message 
digest process unit 7, executes a message digest process for all or some of the additional 
information and the data of the three-dimensional shape model submitted to the 
standardization process, thereby obtaining a message digest value (Step 6-4). 

[0139] The data transformation process unit 18, as well as the message digest 
process unit 7, transforms the representation of the standard data format on the basis of the 
second rule in accordance with the bit stream of the message digest value (Step 6-5). 

[0140] The alteration decision process unit 19 compares a plurality of structural data 
that is transformed by the data transformation process unit 18, with a plurality of structural 
data before being sorted by the data standardization process unit 15 (Step 6-6). If the two 
kinds of structural data agree, the alteration decision process unit 19 renders the decision that 
the plurality of structural data, before being sorted by the data standardization process unit 15, 
namely, the plurality of inputted structural data, have not been altered. However, if the two 
kinds of structural data do not agree, the unit 19 renders the decision that the plurality of 
structural data, before being sorted by the data standardization device, have been altered. 

[0141] Regarding a case where the plurality of structural data submitted to the data 
transformation by the data transformation process unit 18 bear the additional data bestowed 
before the data transformation, if the two kinds of structural data agree, the alteration decision 
process unit 19 renders the decision that the additional data have not been altered, either. 
However, if the two kinds of structural data do not match, the unit 19 renders the decision 
that the plurality of structural data, before being sorted by the data standardization means 
or/and the additional data, have been altered. 



17 

[0142] Accordingly, the originality guarantee system in this exemplary embodiment 
changes the description method of objects with the hashed value of any data used as a key, by 
utilizing the principle of originality guarantee, so as to embed information in "redundancy" 
representing the data, that is, in the description sequence of the objects. It is therefore 
embedding the information without changing any "significance" and "quality" of the 
represented data. The information is not explicitly embedded, but the structure of the data is 
significant. In case of any alteration, the appropriate structure changes, so that the system can 
advantageously detect the alteration. 

[0143] An example of the more detailed operation of the data providing system in 
this exemplary embodiment will be explained below. Consider the case of a set in which 
objects (primitives) are triangles. The explanation is similarly applicable even to general 
polygons or bodies of revolution or a geometric model represented by any mathematical 
model. 

[0144] Assuming that triangles Tl - T100 shows the vertexes of each triangle are 
denoted as, for example, Tl(Tl_a, Tl_b, Tl_c). Here, Tl_a, etc. represent three-dimensional 
vectors. 

[0145] The sequence in which the triangles Tl to T100 are described is redundant in 
a data structure, and the sequence in which the vertexes (Ti a, Ti b, Tic) are described are 
redundant in the triangle Ti. First, any reference point A is considered, and the triangles are 
sorted in the order in which the centroidal vectors of the individual triangles are nearer to the 
reference point A. 

[0146] Further, regarding which of the three vertexes of each triangle is to be first 
described, a description method for each individual triangle is standardized by such a 
technique that an apex having the shortest distance to any reference point B is set as an origin. 

[0147] Thus, the data are standardized. 

[0148] Subsequently, a bit string of specified length is obtained from additional 
information (stated in a header) or any secret bit string which is added to this data, the 
standardized data themselves, and the combination of them, by employing a message digest 
function. 

[0149] Since three sorts of sequences are considered to state the three vertexes of 
each triangle, which of the vertexes is to be first described is determined for, for example, 
every message digest bits. In this way, the representation of the standardized data is 
transformed. 
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[0150] Here, the coordinates of the reference points A and B, a processing method 
to compute a message digest, the kind of data which are used in computing the digest, etc. are 
kept secret, whereby illegal data transformation can be reduced or prevented in case of any 
alteration. 

[0151] Each of the embedded information apparatus and the information alteration 
detection apparatus explained above includes a computer system therein. 

[0152] The course of the series of processing steps concerning each of the 
embedded information and the information alteration detection explained above is stored in 
the form of a program in a computer-readable record medium, and the program is read out 
and run by a computer, thereby to execute the process. 

[0153] That is, the processing device or processing units in each of the embedded 
information apparatus and the information alteration detection apparatus are realized such that 
a central processing apparatus, such as CPU, reads out the above program on a main storage, 
such as ROM or RAM, and executes the arithmetic processing of information. 

[0154] Here, the "computer-readable record medium" signifies a magnetic disk, a 
magnetooptical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. 
Besides, the computer program may well be distributed to a computer through a 
communication line so as to be run by the computer. 



